The WACCI East Chapter September Meeting will be held on September 10, 2019 at 9:00am at Digital Intelligence, 17165 W. Glendale Drive, New Berlin, WI 53151.
The WACCI East Chapter August Meeting will be held on August 13, 2019 at 9:00am at Digital Intelligence, 17165 W. Glendale Drive, New Berlin, WI 53151.
Steve Eisen & Nick Lehman - "Defeating Next-Gen AV and EDR Using Old Tricks On New Dogs"
Next-Gen AV and EDR are the new hotness on the scene this year. They promise to put the bad guys and the red team in their place through increased endpoint detection and response. What they don't do that even traditional AV has had issues with is self-protection. This talk will go into the ways in which next-gen AV such as Cylance Protect and EDR like Windows Defender ATP can be defeated using simple tricks that have worked against AV for decades. Rather than attempt to hide from them, attacking them head on through gaps in self-protection mechanisms seems to be the best bang for the buck.
There will be no meeting for the month of July.
The WACCI East Chapter June Meeting will be held on Tuesday, June 11, 2019 at 9:00am at City of Cudahy, 5050 South lake drive, Cudahy, WI 53110.
Ken Karasek will present “When the Breach Occurs; Gathering Evidence to Determine the Source”.
Ken Karasek Bio:
With more than 30 years of experience, Ken Karasek has extensive experience in the areas of network technology, network security, network architecture, protocol analysis, intrusion prevention, risk analysis, incident response, vulnerability monitoring, with strong emphasis in computer and network forensics.
Ken is currently working at Tenneco, Inc. as a Sr. IT Security Engineer. Prior to this role, Ken was a Sr. Security Specialist with the Verizon RISK team conducting digital forensic analysis, investigating cybersecurity related incidents, providing eDiscovery support, technical training, and other related IT investigations.
Previously, Ken had spent time at Guidance Software (now OpenText), HBGary, and 25 years at a Fortune 500 global company specializing in Internet and network security related functions.